StackRadar

CVE-2024-4068

High

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
268
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 2
affected packages

Uncontrolled resource consumption in braces

Carried by container images the latest versions of 268 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
bracesnpm0.1.5, 1.8.2, 1.8.5, 2.3.1+2 more3.0.3262
node-bracesdeb3.0.2+~3.0.1-1no fix listed1
OSV records
GHSA-grv7-fg5c-xmjgUBUNTU-CVE-2024-4068

Charts affected

268 by stars
ChartLatestAffected imagesRadar Score
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
braces@3.0.2
3.0.3

Open the chart page →

5,654
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
braces@2.3.2
3.0.3

Open the chart page →

5,940
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
braces@2.3.2
3.0.3

Open the chart page →

5,300
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
braces@3.0.2
3.0.3

Open the chart page →

4,206
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
braces@3.0.2
3.0.3
treskon/portrait-ui:DEV-lateste7970783bc8d
braces@3.0.2
3.0.3

Open the chart page →

31,844
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
braces@3.0.2
3.0.3

Open the chart page →

1,164
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
braces@3.0.2
3.0.3

Open the chart page →

6,879
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
braces@3.0.2
3.0.3

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
braces@2.3.2
3.0.3

Open the chart page →

7,517
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
braces@3.0.2
3.0.3

Open the chart page →

9,148
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
braces@2.3.2
3.0.3

Open the chart page →

3,833
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
braces@2.3.2
3.0.3

Open the chart page →

2,154
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
braces@3.0.2
3.0.3

Open the chart page →

9,783
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
braces@2.3.2
3.0.3

Open the chart page →

25,443
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
braces@3.0.2
3.0.3
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
braces@3.0.2
3.0.3

Open the chart page →

3,600
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
braces@3.0.2
3.0.3

Open the chart page →

4,880
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
braces@3.0.2
3.0.3

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
braces@3.0.2
3.0.3

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
braces@1.8.5
3.0.3

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
braces@3.0.2
3.0.3

Open the chart page →

2,616
lametric-nightscout-proxyaolde0.1.01 of 1See more

lametric-nightscout-proxy aolde 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
braces@3.0.2
3.0.3

Open the chart page →

1,186
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
braces@3.0.2
3.0.3

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
braces@3.0.2
3.0.3

Open the chart page →

2,396
agenthttpmqttassist-iot-composite-services1.0.01 of 1See more

agenthttpmqtt assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
braces@3.0.2
3.0.3

Open the chart page →

1,158
agentmqtthttpassist-iot-composite-services1.0.01 of 1See more

agentmqtthttp assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
braces@3.0.2
3.0.3

Open the chart page →

1,158
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
braces@3.0.2
3.0.3

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
braces@3.0.2
3.0.3

Open the chart page →

77,706
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
braces@3.0.2
3.0.3

Open the chart page →

9,369
monitoring-notifyingassist-iot-monitoring-notifying0.1.01 of 1See more

monitoring-notifying assist-iot-monitoring-notifying 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/monitoring_notifying:2.0.068324d0fa5bb
braces@3.0.2
3.0.3

Open the chart page →

1,677
multilink-clientassist-iot-multi-link-client-app1.0.01 of 2See more

multilink-client assist-iot-multi-link-client-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/multi-link_client:latestcf048365d042
braces@3.0.2
3.0.3

Open the chart page →

1,446
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
braces@3.0.2
3.0.3

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
braces@3.0.2
3.0.3
assistiot/smart-orchestrator_enabler:latest89f37e88c871
braces@3.0.2
3.0.3
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
braces@3.0.2
3.0.3

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
braces@3.0.2
3.0.3

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
braces@3.0.2
3.0.3

Open the chart page →

7,152
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
braces@3.0.2
3.0.3

Open the chart page →

1,267
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
braces@3.0.2
3.0.3

Open the chart page →

5,806
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
braces@3.0.2
3.0.3

Open the chart page →

1,187
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
braces@3.0.2
3.0.3

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
braces@3.0.2
3.0.3

Open the chart page →

1,168
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
braces@0.1.5
3.0.3

Open the chart page →

4,069
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
braces@2.3.2
3.0.3

Open the chart page →

4,083
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
braces@2.3.2
3.0.3

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
braces@1.8.5
3.0.3

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
braces@2.3.2
3.0.3

Open the chart page →

2,580
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
braces@3.0.2
3.0.3

Open the chart page →

25,456
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
braces@3.0.2
node-braces@3.0.2+~3.0.1-1
3.0.3
no fix listed

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
braces@2.3.2
3.0.3

Open the chart page →

12,907

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moonrailgun/tianji:1.11.2b528c8f8fcc4
braces@3.0.2
3.0.3
1
moreillon/api-proxy:2373c1953739ef6956b5
braces@3.0.2
3.0.3
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
braces@3.0.2
3.0.3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
braces@3.0.2
3.0.3
1
mozilla/sentencecollector:2.0.91da6ff5c4895
braces@2.3.2
3.0.3
1
mpopoola1/nodejsapp:latest061fc532de7d
braces@3.0.2
3.0.3
1
n8nio/n8n:0.212.0a9195bc499a3
braces@3.0.2
3.0.3
1
n8nio/n8n:1.33.1dd171d45102a
braces@3.0.2
3.0.3
1
neoskop/papergirl:3.2.67f52b5949f03
braces@3.0.2
3.0.3
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
braces@1.8.5
3.0.3
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
braces@2.3.2
3.0.3
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
braces@3.0.2
3.0.3
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
braces@3.0.2
3.0.3
1
nottiey/mynodejswebapp:latest9c35a24c9eb3
braces@3.0.2
3.0.3
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
braces@3.0.2
3.0.3
1
okaforuchena/uo-docker:V1.0.0004e81250f48
braces@3.0.2
3.0.3
1
ondrejsika/parking:latestb1fd497416c8
braces@3.0.2
3.0.3
1
ooghenekaro/amazon:latest03394ba1d6d8
braces@3.0.2
3.0.3
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
braces@3.0.2
3.0.3
1
ooghenekaro/nodejswebapp:latestea5b71588a76
braces@3.0.2
3.0.3
1
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
braces@3.0.2
3.0.3
1
openbas/caldera-server:5.1.0a277796d9724
braces@3.0.2
3.0.3
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
braces@3.0.2
3.0.3
1
openmined/syft-frontend:0.9.5d11524a3854a
braces@3.0.2
3.0.3
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
braces@3.0.2
3.0.3
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
braces@3.0.2
3.0.3
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
braces@2.3.2
3.0.3
1
patdada/bella-docker:v1.0.075127147a624
braces@3.0.2
3.0.3
1
phntom/codimd:2.4.31b9aafbb62e6
braces@3.0.2
3.0.3
1
polonel/trudesk:1.2.60cf6513f6fe3
braces@2.3.2
3.0.3
1
pumejlab/nodejs-webapp:latestf563eabcb819
braces@3.0.2
3.0.3
1
pysga1996/python-redis-web:latestfdeec30ad482
braces@3.0.2
3.0.3
1
rakii8585/angular-node-webapp:latest026082a515ac
braces@3.0.2
3.0.3
1
requarks/wiki:canary-2.5.2438b5865a7386c
braces@2.3.2
3.0.3
1
roadiehq/community-backstage-image:latestef355bf5b639
braces@3.0.2
3.0.3
1
samajh/alprbackend:latestea742b4372ad
braces@3.0.2
3.0.3
1
samajh/alprfrontend:latest05ef4fddbb75
braces@2.3.2
3.0.3
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
braces@3.0.2
3.0.3
1
shinobisystems/shinobi:dev3ca746937856
braces@2.3.2
3.0.3
1
shinobisystems/shinobi:latestc2f5ce2e1067
braces@2.3.2
3.0.3
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
braces@1.8.5
3.0.3
1
skylenet/ethstats-server:pow-latestd757cc016198
braces@3.0.2
3.0.3
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
braces@1.8.5
3.0.3
1
socialmediamacroscope/smile_server:0.3.31a528c794270
braces@2.3.2
3.0.3
1
solidproject/community-server:6.0.2ccc4acb7e9a1
braces@3.0.2
3.0.3
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
braces@3.0.2
3.0.3
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
braces@3.0.2
3.0.3
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
braces@3.0.2
3.0.3
1
srini78/nodejswebappeks:latest5d1cbdc6833a
braces@3.0.2
3.0.3
1
stakater/workshop-exercise:0.0.26076926b7159d3
braces@3.0.2
3.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.